CVE-2015-2808

CVE-2015-2808 concerns RC4 usage in TLS/SSL within OpenJDK/OpenJDK components. The Invariance Weakness (Bar Mitzvah) means RC4 key material can leak partial plaintext from the first bytes of a TLS/SSL stream, enabling plaintext-recovery under certain traffic patterns. Public advisories for OpenJD...

CVE-2016-4058

Huawei Policy Center contains a Cross-site scripting (XSS) vulnerability (CVE-2016-4058) in versions prior to V100R003C10SPC020. The root cause is incomplete input validation allowing remote authenticated users to inject arbitrary script/HTML via vectors related to special characters on pages. Af...